In Chapter 7, Exchanging Data – Import Sets, Web Services, and other Integrations, we explored how an LDAP server can be used as the source for user data. ServiceNow connects to it on a regular basis and synchronizes the data with the User table.
LDAP servers can also perform authentication, with Microsoft Active Directory being almost ubiquitous in enterprise environments. Therefore, it is common to use it and offload the decision of whether a user should have access to the instance. This can be accomplished by connecting to the LDAP server with the username and password that the user gave. If the credentials are accepted, a session is created.
A User record contains two fields that are not visible ...